Smart and Comprehensive Analysis. NCSI looks everywhere on the device completely automatically and can successfully identify over 800 types of digital artifacts. Convenient Evidence Search feature helps to narrow down the findings using filters, pre-defined search, or other options.

Powerful Carving. Data carving allows to locate evidence that was deleted, destroyed, or never stored on the hard drive at all (page file, hibernation file, RAM contents). Besides, advanced carving mode called NCSICarving is available, making it possible to reconstruct fragmented chunks into contiguous pieces of information that would otherwise not be accessible at all.

Handy Built-in Tools. PList, Registry, and SQLite viewers allow you to work more thoroughly with particular types of data and find even more evidence than automatic search was able to discover.

Low-level Investigations. Our technology is equipped with File System Explorer, Hex Viewer, and Type Converter, will allow us to perform deep examination of the contents of files and folders on the device.